Courseiva

Juniper Networks Enterprise Routing and Switching, Professional (JNCIP-ENT, JN0-650) (JNCIP-ENT) (JNCIP-ENT) — Questions 226300

336 questions total · 5pages · All types, answers revealed

Page 3

Page 4 of 5

Page 5
226
MCQmedium

You want to change the OSPF reference bandwidth globally on a Junos routing device to accurately calculate costs for high-speed interfaces. Where is this configured?

A.set system ospf reference-bandwidth 10g
B.set protocols ospf reference-bandwidth 10g
C.set protocols ospf area 0.0.0.0 reference-bandwidth 10g
D.set routing-options ospf reference-bandwidth 10g
AnswerB

This command sets the OSPF reference bandwidth globally to 10 Gbps.

Why this answer

The reference bandwidth for OSPF is configured globally under the protocols ospf hierarchy using the reference-bandwidth statement.

227
Multi-Selecthard

Which TWO statements are true regarding traffic shapers versus policers in Junos? (Choose two)

Select 2 answers
A.Shapers are typically implemented on egress interfaces
B.Policers are primarily configured on egress interfaces for shaping purposes
C.Shapers buffer exceeding traffic to smooth out bursts over time
D.Policers buffer exceeding traffic in dedicated memory queues
E.Shapers operate without drop profiles or buffer allocation
AnswersA, C

Shaping is an egress traffic conditioning mechanism.

Why this answer

Shapers buffer excess traffic to smooth out bursts, whereas policers drop or mark exceeding traffic immediately.

228
MCQhard

An enterprise network uses Q-in-Q tunneling over an MX Series provider network. Customer BPDUs must pass transparently across the provider core without being processed by the provider's own VSTP/MSTP instances. Which feature must be enabled on the provider switch access ports to achieve this?

A.MSTP region boundary enforcement
B.BPDU filter across all bridging domains
C.VLAN translation swapping on inner tags
D.Layer 2 Protocol Tunneling (L2PT)
AnswerD

L2PT encapsulates BPDUs into proprietary multicast frames at the ingress edge and strips them at the egress edge.

Why this answer

Layer 2 protocol tunneling (L2PT) or BPDU tunneling is required to encapsulate L2 control frames (like STP BPDUs) into multicast destination MAC addresses so they cross the core transparently.

229
MCQhard

An enterprise network uses multiple routing instances with PIM sparse-mode. An engineer needs to configure Inter-AS multicast routing using MSDP. Which component is required to establish MSDP peering across different autonomous systems where BGP is also running?

A.A shared PIM dense-mode tunnel between the AS border routers
B.IGMPv2 proxy configuration on the border routers
C.Static multicast routes for all 224.0.0.0/4 destinations
D.Matching MSDP peer loopback addresses and TCP session establishment with MBGP routing
AnswerD

Inter-AS MSDP requires valid TCP peering between RPs and MBGP routing to ensure RPF validation across AS boundaries.

Why this answer

MSDP peers can be configured between BGP speakers in different ASs. The MSDP peer address often matches the BGP router ID or loopback, and MBGP supplies the RPF route for the source.

230
MCQmedium

You are tasked with summarizing internal OSPF routes on an Area Border Router (ABR). Which configuration statement accomplishes route summarization for an area?

A.set protocols ospf summary 10.10.0.0/16 area 0.0.0.1
B.set protocols ospf area 0.0.0.1 aggregate 10.10.0.0/16
C.set routing-options aggregate route 10.10.0.0/16 ospf
D.set protocols ospf area 0.0.0.1 area-range 10.10.0.0/16
AnswerD

The 'area-range' command summarizes routes advertised from the specified area into the backbone or other areas.

Why this answer

Internal route summarization on an OSPF ABR in Junos is configured using the 'area-range' statement under the specific area hierarchy.

231
MCQhard

When configuring a hierarchical policer on a Juniper MX Series router, what is the significance of the logical-interface-policer setting?

A.It separates policing actions strictly for Layer 2 control frames
B.It shares a single policer bucket across all forwarding classes on the logical interface
C.It disables hardware-based policing and falls back to RE software rate-limiting
D.It applies the policer globally across all physical interfaces on the Routing Engine
AnswerB

It enforces rate limits across the entire logical interface aggregate.

Why this answer

A logical-interface-policer applies a single policer instance shared across all queues or forwarding classes on that specific logical interface.

232
MCQhard

An administrator implements BGP entropy labels and path load balancing on a Junos routing platform. During packet forwarding for a BGP-learned IPv4 prefix with multiple equal-cost paths, how does Junos determine the output interface when hash-based load balancing is active?

A.Hashing selected packet header fields to compute an index into the set of resolved BGP next hops.
B.Using the lowest MED value among the multipath entries for every packet transmission.
C.Consulting the BGP Route Reflector cluster list to determine the optimal egress port.
D.Round-robin packet scheduling across all available BGP next hops regardless of flow headers.
AnswerA

Hash-based load balancing uses packet header fields to index into the BGP multipath next-hop array.

Why this answer

Junos hashes packet header fields (such as source/destination IP, ports, and optional hash keys or entropy labels) to select a specific path from the available BGP multipaths.

233
Multi-Selecthard

When configuring advanced Q-in-Q tunneling on Juniper MX Series routers, which THREE encapsulation or tagging parameters must be correctly aligned between the customer edge and provider edge interfaces? (Choose three)

Select 3 answers
A.VLAN action rules (pop, push, or swap)
B.MSTP region name configuration
C.Tag Protocol Identifier (TPID) EtherType values
D.Flexible VLAN tagging enabled on physical interfaces
E.IGMP snooping version compatibility
AnswersA, C, D

Tag manipulation actions must mirror each other for proper tag processing.

Why this answer

Q-in-Q alignment requires matching flexible-vlan-tagging, TPID values (EtherType), and VLAN tag preservation/manipulation rules.

234
MCQeasy

An engineer is configuring a QinQ tunnel where the service provider bridge needs to transparently carry customer control traffic (like STP BPDUs) through the core without processing them. What feature must be enabled on the provider edge access ports?

A.VLAN Translation
B.Rapid Spanning Tree Protocol (RSTP)
C.Layer 2 Protocol Tunneling (L2PT)
D.BPDU Protection (bpdu-block)
AnswerC

L2PT allows customer bridge protocol data units (BPDUs) to be tunneled transparently across a service provider network.

Why this answer

Layer 2 Protocol Tunneling (L2PT) encapsulates customer BPDUs into specific multicast destination MAC addresses at the ingress edge, tunnels them across the provider core, and un-encapsulates them at the egress edge.

235
MCQmedium

An engineer is troubleshooting PIM Sparse-Mode on a Junos device and notices that source traffic is not switching from the shared tree (*,G) to the shortest path tree (S,G) at the Last-Hop Router. Which configuration statement on the Junos routing instance allows adjusting the threshold for this switchover behavior?

A.set routing-options multicast spt-lifetime 0
B.set protocols pim switchover-delay 0
C.set protocols igmp ssm-mapping
D.set protocols pim spt-threshold infinity
AnswerD

Setting the spt-threshold to infinity forces the router to remain on the rendezvous point shared tree (*,G) indefinitely.

Why this answer

By default, Junos switches from the (*,G) shared tree to the (S,G) shortest path tree immediately upon receiving the first data packet from a source. To prevent this or adjust the behavior, operators use the 'spt-threshold' statement under protocols pim.

236
MCQeasy

Which command is used to verify the operational state of forwarding classes and their assigned queues on a specific interface on Junos?

A.show route forwarding-table
B.show class-of-service interface
C.show interfaces extensive
D.show firewall
AnswerB

This command displays CoS settings and queue mappings for interfaces.

Why this answer

The show class-of-service interface command displays operational CoS details, including queue mappings, for specified interfaces.

237
MCQeasy

Which command is used to clear dynamic MAC RADIUS authentication states and force a re-authentication on interface ge-0/0/5?

A.clear ethernet-switching security-table interface ge-0/0/5
B.clear access client-profile ge-0/0/5
C.clear dot1x interface ge-0/0/5
D.clear mac-radius statistics interface ge-0/0/5
AnswerC

Correct. Clearing the dot1x interface resets the state machine for both 802.1X and associated MAC RADIUS fallback.

Why this answer

To clear dot1x or mac-radius states on an interface, the 'clear dot1x statistics' or 'clear access security' commands are used, or more specifically 'clear dot1x interface' to reset the state machine.

238
MCQhard

In a BGP confederation setup, two member ASNs (65001 and 65002) belong to a larger confederation AS (65100). When routes are advertised between these two member ASs, how is the AS path attribute handled?

A.The confederation AS number is prepended to the front of the path, removing all member AS numbers.
B.The member AS numbers are completely stripped and replaced by the confederation AS number.
C.The route is dropped by the receiving member AS due to an inter-AS loop prevention violation.
D.The member AS numbers are placed in AS_CONFED_SEQUENCE segments and are not treated as external AS hops.
AnswerD

AS_CONFED_SEQUENCE attributes track paths inside the confederation without affecting external AS path length calculations.

Why this answer

Confederation member AS numbers are included in the AS_CONFED_SEQUENCE attribute and are stripped when the route exits the confederation boundary.

239
MCQeasy

Which RADIUS attribute is commonly used to assign a specific session timeout value to an 802.1X authenticated client on an EX Series switch?

A.Idle-Timeout (Attribute 28)
B.Tunnel-Client-End-Id (Attribute 66)
C.Termination-Action (Attribute 29)
D.Session-Timeout (Attribute 27)
AnswerD

Correct. Attribute 27 governs session timeout.

Why this answer

RADIUS Attribute 27 (Session-Timeout) specifies the maximum number of seconds of service to be provided to the user.

240
Multi-Selecthard

Which THREE mechanisms are provided by Juniper switches running MSTP to protect against bridging loops caused by unidirectional link failures or misbehaving switches? (Choose three)

Select 3 answers
A.Storm control broadcast filtering
B.Root guard
C.Loop guard
D.BPDU guard
E.MACsec cryptographic validation
AnswersB, C, D

Root guard prevents unauthorized switches from becoming root.

Why this answer

Loop guard, root guard, and bpdu guard are standard STP/MSTP protection features available on Juniper switches.

241
Multi-Selecthard

Which THREE diagnostic tools or show commands are useful when troubleshooting MAC RADIUS authentication failures on an EX Series switch? (Choose three)

Select 3 answers
A.Traceoptions configured under protocols dot1x and access-profile for logging.
B.show access security clients
C.show dot1x interface detail
D.traceroute mac-address
E.show access radius-server statistics
AnswersA, C, E

Correct. Traceoptions provide detailed debug logs for authentication flows.

Why this answer

Troubleshooting MAC RADIUS involves checking traceoptions, access client states, and dot1x interface details.

242
MCQmedium

You are configuring an EX3400 switch to support IP phones that require power redundancy. Which PoE management feature allows the switch to allocate power based on available PSU capacity while reserving a safety margin?

A.set chassis poe redundant-psu enable
B.The system automatically accounts for redundant power supplies, but power management thresholds can be adjusted via system PoE budget settings.
C.set poe management-mode power-limit
D.set poe redundancy-mode full
AnswerB

Junos switches dynamically adjust total PoE budgets based on installed and active power supplies.

Why this answer

PoE power management configuration allows setting guard bands or managing power budgets based on active power supplies.

243
Multi-Selectmedium

Which THREE parameters are typically included in an LLDP-MED network policy TLV for voice application? (Choose three.)

Select 3 answers
A.VLAN ID
B.IP Phone MAC Address
C.Switch Power Supply Serial Number
D.DSCP Value (Layer 3 QoS)
E.Layer 2 Priority (802.1p)
AnswersA, D, E

The voice VLAN ID is a core component of the network policy TLV.

Why this answer

LLDP-MED network policies specify VLAN ID, Layer 2 priority (802.1p), and Layer 3 DSCP markings.

244
Multi-Selectmedium

When configuring Power over Ethernet (PoE) on an EX Series switch, which THREE parameters can be explicitly managed or configured per interface? (Choose three)

Select 3 answers
A.Port priority (low, high, critical)
B.Disabling PoE on a specific interface
C.Dynamic voltage step-down thresholds based on cable length
D.Automatic cable resistance compensation profiling
E.Maximum power limit in watts or milliwatts
AnswersA, B, E

Port priority can be configured per interface to determine power shedding order.

Why this answer

Junos allows administrators to configure various PoE parameters on a per-interface basis, including priority, maximum power limit, and disabling PoE entirely on specific ports.

245
Multi-Selectmedium

Which THREE actions can be executed by a firewall filter policer when traffic exceeds the specified rate? (Choose three)

Select 3 answers
A.discard
B.loss-priority high
C.reroute-lsp
D.forward
E.queue-switch
AnswersA, B, D

discard drops non-conforming packets.

Why this answer

Junos policers can discard packets, forward packets with changed loss priority, or transmit them without modification.

246
MCQmedium

You are configuring MAC RADIUS authentication on an EX Series switch and want to ensure that devices failing MAC RADIUS are assigned to a restricted quarantine VLAN. Where is the quarantine VLAN configured for failed MAC RADIUS attempts?

A.Under [edit protocols dot1x interface ge-0/0/1 failure-action vlan quarantine-vlan].
B.Under [edit access profile profile-name radius-options quarantine-vlan].
C.Under [edit forwarding-options storm-control profile quarantine].
D.Under [edit vlans quarantine-vlan captive-portal-binding].
AnswerA

Correct. Failure actions for dot1x/mac-radius dictate VLAN placement on failure.

Why this answer

Failed authentication action (such as assigning a guest or restricted VLAN) in Junos switch access control is configured under the interface or protocol fallback/fail action hierarchy, such as 'retries' or 'no-response-action' / 'failure-action'.

247
MCQmedium

An EX4300 switch is experiencing a PoE budget shortage, causing newly connected IP phones to be denied power. You need to change the PoE power management mode from the default to dynamic consumption-based allocation rather than static class-based allocation. Which command achieves this?

A.set power-options allocation-mode consumed
B.set poe management-mode dynamic
C.set poe interface all priority medium
D.set system poe mode consumption
AnswerB

The command set poe management-mode dynamic configures consumption-based PoE power allocation.

Why this answer

Junos switches support configuring PoE power management by consumed rather than allocated class via the management mode command.

248
MCQeasy

When configuring advanced VLAN mapping on a Juniper MX Series router using flexible VLAN tagging, which term describes the action of replacing an incoming inner VLAN tag with a new tag before forwarding into the provider core?

A.VLAN stripping
B.VLAN swap
C.VLAN push
D.VLAN pop
AnswerB

Swap replaces an existing tag with a new tag value.

Why this answer

VLAN translation or swapping replaces the incoming tag with a mapped tag.

249
MCQhard

An enterprise network running VSTP (VLAN Spanning Tree Protocol) across Juniper EX Series switches experiences unexpected loops because a newly added switch does not participate in VSTP for VLAN 50. Upon investigation, you discover the VSTP BPDU multicast destination MAC address is being dropped by a third-party non-Juniper intermediate switch. What is the standard VSTP MAC address used for BPDU transmission?

A.01:00:0c:cc:cc:cd
B.01:80:c2:00:00:08
C.01:80:c2:00:00:00
D.01:80:c2:00:00:0f
AnswerA

VSTP uses the Cisco/PVST+ compatible multicast MAC address 01:00:0c:cc:cc:cd.

Why this answer

VSTP utilizes the PVST+ proprietary destination MAC address of 01:00:0c:cc:cc:cd to interoperate and transmit per-VLAN spanning tree BPDUs.

250
Multi-Selecthard

Which THREE actions occur during the EVPN Designated Forwarder (DF) election process on a multi-homed Ethernet segment? (Choose three)

Select 3 answers
A.A Designated Forwarder is elected to forward BUM traffic from the core to the multi-homed site.
B.All participating PEs simultaneously forward BUM traffic to maximize bandwidth utilization.
C.Segment preference values and IP addresses are evaluated to determine the forwarding role deterministically.
D.MAC mobility sequence numbers are reset to zero during the election.
E.PE routers exchange Route Type 4 (Ethernet Segment Routes) to discover peers attached to the same segment.
AnswersA, C, E

The DF is responsible for sending BUM traffic down to the attached customer site.

Why this answer

DF election uses Route Type 4 (Ethernet Segment routes) to exchange reachability, determines the forwarder based on preference and algorithms, and assigns responsibility for BUM traffic forwarding.

251
Multi-Selecthard

Which THREE attributes or conditions must be met for successful dynamic VLAN assignment via RADIUS during 802.1X authentication on Junos EX Series switches? (Choose three)

Select 3 answers
A.The supplicant must initiate EAP-TLS with mutual certificate validation.
B.The RADIUS server must return Tunnel-Type (Attribute 64), Tunnel-Medium-Type (Attribute 65), and Tunnel-Private-Group-ID (Attribute 81).
C.The VLAN returned by the RADIUS server must already be configured locally on the EX Series switch.
D.The RADIUS server must return the VLAN ID encoded inside a Vendor-Specific Attribute (VSA) using Cisco-AVPair format exclusively.
E.The switch port must be configured to allow dynamic VLANs or be configured as a trunk port capable of hosting the assigned VLAN.
AnswersB, C, E

Correct. Standard tunneling attributes are required for VLAN assignment.

Why this answer

Dynamic VLAN assignment requires the VLAN to exist locally, the RADIUS server to return Tunnel-Type, Tunnel-Medium-Type, and Tunnel-Private-Group-ID, and the port to be capable of dynamic VLAN membership.

252
MCQmedium

An engineer needs to verify the Rendezvous Point (RP) currently learned by a Junos router via the Bootstrap Router (BSR) mechanism. Which operational command should be executed?

A.show pim rps
B.show igmp group
C.show multicast route
D.show msdp summary
AnswerA

The 'show pim rps' operational command displays all active Rendezvous Points and how they were learned (static, BSR, etc.).

Why this answer

To check the dynamic RP mappings learned via BSR or static configuration, the command 'show pim join' or 'show pim rps' is used. Specifically, 'show pim rps' displays the active RP database.

253
MCQmedium

An engineer is troubleshooting EVPN type 2 routes between two MX Series routers and notices that MAC addresses learned locally are not being advertised to the remote VTEP. Which command should the engineer use to verify that the EVPN instance is actively generating and exporting MAC-VRF routes?

A.show bridge mac-table
B.show bgp summary
C.show route advertising-protocol bgp <neighbor-ip>
D.show evpn database
AnswerC

This command displays the exact routes advertised to a specific BGP neighbor, confirming route generation and export.

Why this answer

The 'show route advertising-protocol bgp' command allows an engineer to verify which routes (including EVPN type 2 MAC/IP routes) are being advertised to a specific BGP peer or peer group for an EVPN routing instance.

254
MCQmedium

An engineer needs to ensure that routes received from an external BGP peer are evaluated using multipath load balancing across different next hops. By default, Junos requires several conditions to be met for multipath. Which condition is mandatory for BGP multipath to consider two paths as valid candidates?

A.The peer IP addresses must reside on the exact same subnet.
B.The IGP metric to the BGP next hop must be identical for all participating paths.
C.The advertising router IDs must be identical.
D.The cluster lists must be completely empty.
AnswerB

Equal IGP metric to the next hop is one of the strict default requirements for Junos BGP multipath unless explicitly relaxed.

Why this answer

To qualify for BGP multipath in Junos, multiple attributes must match by default, including AS path length, local preference, origin, MED, and the IGP metric to the respective next hops must be equal (or within an acceptable variance if configured).

255
MCQhard

You are configuring captive portal on an EX Series switch using J-Web and CLI. Users are redirected to the captive portal page, but after successful authentication, they still cannot access the external network. Inspecting the routing table and firewall filters, what is the most likely reason for this post-authentication restriction?

A.The default gateway address specified in the captive portal profile is in a different routing instance.
B.The captive portal dynamic firewall filter was not removed from the interface due to a failure in receiving the RADIUS Change of Authorization (CoA) or accounting update.
C.The user's MAC address was not statically added to the bypass list of the captive portal profile.
D.The captive portal profile lacks a defined redirect URL for the external network gateway.
AnswerB

Correct. Post-auth requires removal of the redirect filter, usually triggered by CoA or successful radius acceptance.

Why this answer

After successful captive portal authentication, the switch must dynamically remove the local firewall filter that redirects traffic to the portal server. If CoA or dynamic VLAN assignment fails, the filter remains active.

256
MCQhard

An operator configures BGP attribute value manipulation using a Junos routing policy. Specifically, the policy uses 'as-path-action prepend' combined with community matching. When is this outbound policy evaluated relative to BGP route selection?

A.During the initial import processing from EBGP peers before next-hop resolution.
B.When advertising routes to a BGP peer, after the best path has been chosen.
C.Before the best path is selected, affecting the local routing table calculation.
D.During the route selection algorithm right after MED comparison.
AnswerB

Export policies apply to outgoing updates after the local router has determined its best path.

Why this answer

Outbound export policies are evaluated when advertising routes to peers, after the best path has been selected locally.

257
MCQmedium

You need to ensure that delay-sensitive voice traffic is serviced before all other queues on an egress interface. Which scheduler property should you configure for the voice forwarding class?

A.buffer-size
B.transmit-rate
C.drop-profile
D.priority high
AnswerD

Setting priority to high enables strict priority queuing for the queue.

Why this answer

In Junos, priority high or priority low is used to designate strict priority queuing for a forwarding class in a scheduler.

258
Multi-Selecthard

Which THREE parameters must be configured when implementing captive portal on an EX Series switch? (Choose three)

Select 3 answers
A.A captive portal profile specifying redirection URLs and authentication parameters.
B.A global RADIUS accounting policy with interim-interval set to zero.
C.Interface or VLAN bindings linking the captive portal service to specific ports.
D.A static NAT pool for translating client IP addresses to the captive portal server IP.
E.An access profile defining the authentication server group.
AnswersA, C, E

Correct. The captive portal profile dictates portal behavior and URLs.

Why this answer

Captive portal implementation requires an access profile, a captive portal profile with redirection URLs, and binding the captive portal profile to the target interfaces or VLANs.

259
MCQhard

You are configuring a Junos EVPN-VXLAN environment where Type-3 (Inclusive Multicast Ethernet Tag) routes are being exchanged. A remote MX router is failing to establish ingress replication tunnels because it does not import the Type-3 route. Which configuration statement under the routing-instance is missing or misconfigured?

A.no-normalization
B.route-target import
C.multicast-snooping
D.vtep-source-interface lo0.0
AnswerB

Type-3 routes use standard BGP route targets. If the import route target is missing or incorrect, the Type-3 route will not be accepted into the EVPN routing instance's BGP table.

Why this answer

EVPN Type-3 routes carry the Inclusive Multicast Ethernet Tag and rely on route targets for import and export. If the import route-target does not match the advertising router's export route-target, the tunnel endpoints are not dynamically bound.

260
Multi-Selectmedium

Which THREE statements describe the behavior of LLDP-MED capability on Junos EX Series switches? (Choose three.)

Select 3 answers
A.It automates network policy configuration for voice, video, and guest VLANs.
B.It replaces the need for Ethernet switching entirely by converting access ports into routed links.
C.It allows the switch to exchange location identification information with emergency-capable endpoints.
D.It requires OSPFv3 to be running on all connected IP phones.
E.It provides inventory management by advertising hardware, software, and serial number details from the endpoint.
AnswersA, C, E

Network policy distribution is a primary function of LLDP-MED.

Why this answer

LLDP-MED enables advanced capabilities like device location, inventory management, and network policies for endpoints.

261
MCQmedium

You need to adjust the OSPF cost on a specific interface to manipulate path selection. Which command sets the OSPF cost on an interface?

A.set routing-options interface xe-0/0/0.0 ospf-cost 50
B.set protocols ospf area 0.0.0.0 interface xe-0/0/0.0 cost 50
C.set interfaces xe-0/0/0.0 ospf-cost 50
D.set protocols ospf area 0.0.0.0 interface xe-0/0/0.0 metric 50
AnswerB

The 'cost' command explicitly sets the OSPF cost for that interface.

Why this answer

OSPF interface cost is explicitly configured under the interface hierarchy within protocols ospf using the 'cost' statement.

262
MCQhard

A network engineer is configuring a Junos routing device to use BGP Prefix-Independent Convergence (PIC) edge for faster failover. What is the fundamental mechanism that enables BGP PIC to achieve sub-second convergence upon primary path failure?

A.It bypasses the routing table entirely and queries the BGP route reflector directly upon failure.
B.It pre-installs a backup loop-free alternate (LFA) next hop in the forwarding plane for rapid hardware switching.
C.It forces the IGP to recalculate shortest paths immediately using fast-reroute without BGP participation.
D.It increases the BGP keepalive and hold timers to prevent session tearing during link flaps.
AnswerB

PIC pre-computes backup paths in the forwarding table, decoupling convergence time from the number of prefixes.

Why this answer

BGP PIC pre-computes a backup loop-free alternate next hop and installs it in the forwarding table alongside the primary next hop, allowing hardware-based failover.

263
MCQhard

An administrator troubleshooting an IGMP snooping issue on an EX Series switch notices that multicast traffic is flooding all ports in a VLAN. Which Junos command verifies the IGMP snooping status and active querier on a specific VLAN?

A.show protocols igmp snooping vlan
B.show ethernet-switching igmp-snooping
C.show igmp-snooping membership vlan vlan-name
D.show bridge igmp-snooping querier
AnswerC

This command shows IGMP snooping group memberships and querier status for the specified VLAN.

Why this answer

On Juniper EX Series switches, IGMP snooping operational state and querier details per VLAN are displayed using 'show igmp-snooping membership' or 'show igmp-snooping statistics'.

264
Multi-Selecthard

An engineer is configuring BGP route resolution and next-hop tracking in Junos. Which TWO circumstances will cause a BGP next hop to be marked as unresolved or unusable? (Choose two)

Select 2 answers
A.The BGP next-hop IP address matches a directly connected interface subnet on the router.
B.The BGP neighbor session is established over a loopback interface using multihop.
C.The resolving route has an active loop-free alternate backup path installed.
D.The resolving route in the IGP routing table points to a discard or reject dead-end route.
E.No active route exists in the routing table to reach the BGP next-hop address.
AnswersD, E

Discard or reject resolving routes invalidate BGP next-hop resolution.

Why this answer

BGP next hops become unusable if the resolving route in the IGP table is missing, points to a discard/reject route, or lacks reachability.

265
MCQmedium

A network engineer must implement Anycast RP using MSDP between two data center routers running Junos OS. Which statement correctly describes a core requirement for MSDP peer establishment?

A.MSDP messages are encapsulated in PIM register packets and sent directly to the multicast group 224.0.0.13.
B.MSDP relies on IGMPv3 source filters to exchange active source state information across administrative domains.
C.MSDP peering sessions require direct physical interface connectivity between the Anycast RP routers.
D.MSDP peer addresses must be reachable via standard unicast routing protocols, and TCP port 639 must be allowed.
AnswerD

MSDP uses TCP (port 639) for transport, meaning underlying unicast routing must be operational between the peer loopbacks.

Why this answer

MSDP sessions run over TCP port 639. Unlike PIM, MSDP peers do not require direct physical connectivity and typically peer using their loopback addresses, requiring an IGP and an underlying unicast route to establish the TCP connection.

266
Multi-Selectmedium

When configuring a BGP route reflector cluster in Junos, which THREE guidelines or operational behaviors should an engineer keep in mind? (Choose THREE)

Select 3 answers
A.A route reflector must never reflect routes received from a non-client peer back to other non-client peers.
B.Clients of a route reflector must be configured in a full iBGP mesh with each other.
C.Route reflectors automatically modify the AS_PATH attribute of all reflected routes.
D.The Originator ID attribute is added by the route reflector to prevent routing loops from client peers.
E.Redundant route reflectors within the same cluster must be configured with the same cluster ID.
AnswersA, D, E

Standard iBGP full-mesh rules apply between non-client peers; a route reflector reflects routes from clients to all clients and non-clients, and from non-clients to clients only.

Why this answer

Route reflectors reflect routes between clients and non-clients. Loop prevention uses Originator ID and Cluster List. Redundant RRs in the same cluster must share the same cluster ID to prevent routing loops and oscillation.

267
MCQeasy

Which Junos configuration hierarchy is used to define an EVPN routing instance of type 'evpn'?

A.bridge-domains <name> evpn
B.protocols evpn
C.routing-instances <name> instance-type evpn
D.interfaces xe-0/0/0 unit 0 family evpn
AnswerC

The correct hierarchy for creating an EVPN instance is under routing-instances with instance-type evpn.

Why this answer

In Junos OS, EVPN instances are defined under 'routing-instances <name> instance-type evpn'.

268
MCQmedium

You are configuring an EX Series switch for 802.1X authentication. You want to ensure that if a supplicant fails authentication, the port is moved into a specific guest VLAN. Where is the guest VLAN referenced within the dot1x interface configuration?

A.Under [edit access-control interface ge-0/0/1 fallback-vlan].
B.Under [edit access profile profile-name guest-vlan].
C.Under [edit vlans vlan-name dot1x-guest-access].
D.Under [edit protocols dot1x interface ge-0/0/1 guest-vlan vlan-name].
AnswerD

Correct. Guest VLANs are specified directly under the dot1x interface configuration.

Why this answer

Guest VLANs in Junos 802.1X configurations are assigned under the interface authentication options using the 'guest-vlan' statement.

269
MCQeasy

When configuring OSPFv3, which Junos address-family hierarchy is used to enable OSPFv3 on an interface?

A.set protocols ospf3 area 0.0.0.0 interface xe-0/0/0.0
B.set protocols ospf version 3 area 0.0.0.0 interface xe-0/0/0.0
C.set protocols ipv6 ospf area 0.0.0.0 interface xe-0/0/0.0
D.set protocols ospf3 ipv6 area 0.0.0.0 interface xe-0/0/0.0
AnswerA

OSPFv3 is configured under protocols ospf3 referencing areas and interfaces directly.

Why this answer

OSPFv3 in Junos operates within the IPv6 address family under protocols ospf3.

270
Multi-Selectmedium

When troubleshooting EVPN control plane connectivity in Junos OS, which THREE commands provide essential diagnostic information regarding EVPN routing tables and peers? (Choose three)

Select 3 answers
A.show mpls lsp extensive
B.show route table bgp.evpn.0
C.show bgp summary
D.show spanning-tree interface
E.show evpn database
AnswersB, C, E

This displays the master BGP EVPN routing table containing all received EVPN routes.

Why this answer

To troubleshoot EVPN control plane issues, commands like 'show route table bgp.evpn.0', 'show bgp summary', and 'show evpn database' are essential for verifying route tables, neighbor status, and MAC databases.

271
MCQmedium

You notice that an EX4300 switch power budget calculation is set to use 'class-based' allocation. What does this mean regarding how power is reserved for connected IP phones?

A.The switch allocates a flat 15.4W to every port regardless of what device is plugged in.
B.The switch reserves power according to the maximum wattage defined by the device's hardware PoE class (e.g., Class 0, Class 3).
C.The switch shares a dynamic pool where ports draw power on a first-come, first-served basis without limits.
D.The switch allocates power based on real-time LLDP-MED reported consumption values.
AnswerB

Class-based power allocation strictly reserves the maximum power defined by the standard classification of the connected device.

Why this answer

Class-based power allocation reserves the maximum wattage specified by the device's 802.3af/at power class, regardless of actual consumption.

272
Multi-Selecthard

When designing a high-scale enterprise campus network using Juniper EX Series switches, which THREE best practices should be followed for Spanning Tree Protocol design? (Choose three)

Select 3 answers
A.Use default bridge priority values on all core switches to allow automated root election.
B.Enable BPDU guard and loop guard on all edge access ports.
C.Disable Spanning Tree entirely on all access ports to ensure faster convergence.
D.Manually position root and secondary root bridges at the core or distribution layer.
E.Keep MSTP region configurations (name, revision, VLAN mapping) identical across all switches in the region.
AnswersB, D, E

Protecting edge ports prevents unauthorized loops and topology manipulation.

Why this answer

Best practices include placing root bridges at the core/distribution layer, using edge protection features, and maintaining consistent region parameters.

273
Multi-Selecthard

An administrator wants to verify LLDP and LLDP-MED operation on an EX Series switch. Which THREE operational commands provide relevant diagnostic information? (Choose three.)

Select 3 answers
A.show spanning-tree interface
B.show poe interface
C.show chassis routing-engine
D.show lldp neighbor detail
E.show lldp med neighbors detail
AnswersB, D, E

Displays PoE power consumption and operational status per port.

Why this answer

Operational verification of LLDP utilizes show lldp neighbor, show lldp med neighbors, and show poe interface commands.

274
Multi-Selecthard

Which TWO actions occur by default on a Junos EX Series switch port when an IP phone successfully negotiates its voice VLAN using LLDP-MED? (Choose two)

Select 2 answers
A.The switch automatically configures the interface to forward traffic for the learned voice VLAN ID.
B.The switch converts the access port into a full trunk port removing all native VLAN configurations.
C.The switch applies the received Layer 2 priority and DSCP marking settings to the voice traffic flow.
D.The switch disables Spanning Tree Protocol on the interface to optimize voice convergence time.
E.The switch shuts down PoE on the port if the phone attempts to use tagged data frames.
AnswersA, C

The switch dynamically incorporates the voice VLAN learned via LLDP-MED into the port forwarding behavior.

Why this answer

When LLDP-MED successfully negotiates a voice VLAN, the switch automatically applies network policies and can dynamically configure the port to handle the advertised voice VLAN alongside the data VLAN.

275
MCQhard

An enterprise network uses 802.1X authentication with dynamic VLAN assignment on EX Series switches. A client authenticates, and the RADIUS server returns both a VLAN name and a set of dynamic firewall filter names via RADIUS attributes (Filter-Id). When the client connects, the VLAN assignment works perfectly, but the firewall filters are not applied to the interface. What is the most likely cause?

A.The dynamic filter must be defined inside the global access profile instead of being returned by RADIUS.
B.The named firewall filters were not pre-configured and committed locally on the EX Series switch.
C.RADIUS Filter-Id attributes are not supported on EX Series switches for dynamic firewall application.
D.Dynamic filter assignment requires MAC RADIUS and is not supported with 802.1X.
AnswerB

Correct. Dynamic filters referenced by RADIUS Filter-Id must exist locally on the switch.

Why this answer

For dynamic Filter-Id attributes returned by RADIUS to be applied successfully on an EX Series switch, the named firewall filters must already be pre-configured and committed locally on the switch. If the filter does not exist locally, the application fails.

276
MCQmedium

You are configuring voice VLANs on an EX2300 switch. You want to ensure that untagged frames entering the interface are placed into the data VLAN, while frames generated by the attached IP phone are tagged with VLAN 50. Which CLI configuration snippet correctly achieves this?

A.set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode access native-vlan data-vlan voice-vlan v50
B.set protocols lldp-med interface ge-0/0/1 vlan 50
C.set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode access vlan members data-vlan and set interfaces ge-0/0/1 unit 0 family ethernet-switching voice-vlan 50
D.set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan members [ data-vlan voice-vlan ]
AnswerC

This correctly assigns the access VLAN for untagged traffic and the voice-vlan for tagged telephony traffic.

Why this answer

Configuring the interface with a native VLAN for data and a voice-vlan statement for the phone is standard Junos syntax.

277
MCQmedium

You are deploying a new IP telephony network on an EX4300 switch. The voice VLAN must be automatically communicated to connected IP phones using LLDP-MED. Which configuration parameter under system services lldp med fast-start-repeat-count must you configure to ensure rapid initial device discovery?

A.set system services lldp fast-start-count 4
B.set interfaces all lldp-med fast-start 4
C.set protocols lldp fast-start-repeat 4
D.set protocols lldp-med fast-start-repeat-count 4
AnswerD

This command correctly sets the number of rapid LLDP-MED transmissions for fast device startup.

Why this answer

In Junos, LLDP-MED fast-start features help newly connected devices discover network policies faster. Configuring lldp med fast-start-repeat-count defines how many times fast-start packets are sent upon connection.

278
MCQeasy

Which Junos command displays the status of all captive portal sessions currently active on an EX Series switch?

A.show system captive-portal sessions
B.show access captive-portal clients
C.show ethernet-switching captive-portal table
D.show dot1x captive-portal summary
AnswerB

Correct. This command lists active captive portal client sessions.

Why this answer

The command 'show access captive-portal clients' displays active captive portal sessions and their status.

279
MCQhard

You are integrating an EVPN-VXLAN fabric with an existing MPLS L3VPN backbone using a data center gateway. Which route type allows seamless translation and communication of prefix routes between the EVPN instance and the IP-VRF MPLS VPN backbone?

A.Route Type 5
B.Route Type 3
C.Route Type 1
D.Route Type 2
AnswerA

Route Type 5 provides IP prefix routes that map directly to IP-VRF constructs for inter-domain routing.

Why this answer

EVPN Route Type 5 (IP Prefix Route) permits the advertising of IP prefixes that can be easily imported into IP-VRFs, bridging EVPN and classical MPLS L3VPN domains.

280
MCQmedium

You are troubleshooting voice quality issues on an IP phone connected to an EX Series switch. You suspect that the switch is not trusting the DSCP markings (DSCP 46) sent by the IP phone. Which Junos class-of-service (CoS) configuration ensures that incoming voice traffic DSCP bits are trusted at the ingress interface?

A.set class-of-service interfaces ge-0/0/5 classifier dscp default
B.set protocols lldp-med trust-qos
C.set interfaces ge-0/0/5 family ethernet-switching trust-dscp
D.set poe interface ge-0/0/5 qos-trust
AnswerA

Applying a DSCP classifier on the ingress interface tells the switch to map incoming IP packet DSCP values to internal forwarding classes.

Why this answer

Configuring forwarding-class and rewrite rules or trusting DSCP at ingress is handled via CoS classifiers.

281
MCQeasy

An administrator needs to enable BPDU protection on edge access ports in a VSTP environment to prevent loops caused by unauthorized switches. Which command under 'protocols vstp' accomplishes this globally or per-interface?

A.set protocols vstp interface ge-0/0/1 disable-on-bpdu
B.set protocols vstp interface ge-0/0/1 edge-port protect
C.set protocols vstp interface ge-0/0/1 drop-bpdu
D.set protocols vstp interface ge-0/0/1 bpdu-guard
AnswerD

bpdu-guard protects edge ports by error-disabling them when BPDUs are detected.

Why this answer

bpdu-guard under interface configuration in VSTP drops or disables the port upon receiving BPDUs.

282
Multi-Selectmedium

Which THREE types of information can be examined using the command 'show class-of-service interface' on a Junos device? (Choose three)

Select 3 answers
A.Active scheduler maps
B.Configured rewrite rules
C.Current BGP peer states
D.Assigned classifiers
E.Routing table packet forwarding counts
AnswersA, B, D

Shows scheduler maps bound to the interface.

Why this answer

The show class-of-service interface command displays assigned scheduler maps, rewrite rules, and active classifiers on the interface.

283
MCQmedium

An administrator wants to configure MSDP (Multicast Source Discovery Protocol) between two autonomous system border routers to share active source information. Which configuration hierarchy in Junos is used to define the MSDP peer relationship?

A.[edit routing-options msdp]
B.[edit protocols msdp]
C.[edit protocols pim msdp]
D.[edit protocols bgp group msdp]
AnswerB

MSDP peer parameters and local address configurations are placed under protocols msdp.

Why this answer

MSDP in Junos is configured under the [edit protocols msdp] hierarchy.

284
Multi-Selectmedium

Which TWO configuration statements are required when setting up an MSTP region on a Juniper EX Series switch? (Choose two)

Select 2 answers
A.set protocols mstp revision 1
B.set protocols mstp configuration-name RegionA
C.set protocols mstp msti-priority 4096
D.set protocols mstp region-type standard
E.set protocols mstp force-version 802.1s
AnswersA, B

The revision number is a mandatory component of the MST region configuration digest.

Why this answer

MSTP configuration requires defining a configuration name and a revision number within the mstp protocol hierarchy.

285
MCQmedium

An IP phone connected to an EX4300 switch is assigned to voice VLAN 50 via LLDP-MED. However, when a PC is plugged into the IP phone's pass-through port, the PC cannot obtain an IP address via DHCP. The switch port is configured with interface-mode access and a native VLAN for data. What is the most likely root cause?

A.The IP phone is stripping VLAN tags from the PC's DHCP requests.
B.The native VLAN is not allowed or configured correctly on the access port, causing untagged PC traffic to be dropped.
C.The switch's DHCP snooping binding database has reached its maximum limit.
D.LLDP-MED is overriding the PC's MAC address and blacklisting it.
AnswerB

In access mode, untagged traffic maps to the native VLAN; if that VLAN is missing or misconfigured, DHCP fails.

Why this answer

If the switch port is in strict access mode without proper native VLAN forwarding or if untagged traffic is dropped, the PC fails. Alternatively, voice VLAN tagging mismatches can block native traffic.

286
MCQmedium

An enterprise administrator wants to limit PIM sparse-mode join messages to prevent unauthorized sources from registering. Where should a policy be applied to filter PIM join/prune messages in Junos?

A.set protocols pim import <policy-name>
B.set protocols igmp import <policy-name>
C.set routing-options pim-policy <policy-name>
D.set interfaces all unit 0 family pim filter input <policy-name>
AnswerA

Applying an import policy under [edit protocols pim] filters incoming PIM join and prune messages.

Why this answer

PIM join/prune filtering is accomplished by applying a import policy under protocols pim.

287
MCQhard

When configuring centralized gateway or distributed gateway routing models in an EVPN-VXLAN environment, how does a distributed gateway using Integrated Routing and Bridging (IRB) interfaces operate regarding default gateway functionality?

A.Routing is disabled on leaf nodes, requiring all packets to be tunneled to spine nodes for L3 lookup.
B.A single designated MX core router handles all inter-subnet routing via centralized IRB interfaces.
C.Hosts must run VRRP between leaf nodes to dynamically elect a single active gateway.
D.All leaf nodes act as default gateways using the same virtual MAC and IP address, terminating traffic locally.
AnswerD

Distributed gateways use an anycast gateway configuration where every leaf responds as the default gateway for local subnets.

Why this answer

In a distributed gateway model, every leaf/VTEP acts as the default gateway for its directly attached subnets, using anycast MAC and IP addresses so hosts can send traffic to their local VTEP regardless of which leaf they connect to.

288
MCQmedium

You have configured a custom scheduler map, but traffic in the best-effort queue is being starved during periods of heavy congestion. Which scheduler parameter should you adjust to guarantee a minimum bandwidth for this queue?

A.drop-profile-map
B.buffer-size temporal
C.priority high
D.transmit-rate
AnswerD

Transmit-rate guarantees a minimum bandwidth allocation.

Why this answer

The transmit-rate parameter in a scheduler definition guarantees a minimum bandwidth allocation for a queue even during congestion.

289
MCQhard

A Junos router is configured with BGP path selection, and multiple paths arrive with different MED values. Under what specific condition does Junos compare the MED values of paths from different autonomous systems during route selection?

A.Junos compares MEDs from different ASs when the AS path lengths are completely identical.
B.Junos compares MEDs from different ASs only when the 'always-compare-med' statement is configured under protocols bgp.
C.Junos never compares MEDs from different ASs under any circumstance.
D.Junos compares MEDs from different ASs automatically if the routes share the same IGP metric.
AnswerB

The 'always-compare-med' command forces MED comparison across different autonomous systems.

Why this answer

By default, Junos (like standard BGP implementations) only compares MEDs from different ASs if the 'always-compare-med' configuration is explicitly enabled.

290
Multi-Selectmedium

Which THREE methods can be used on Junos devices to influence inbound BGP traffic selection from external ASNs? (Choose three)

Select 3 answers
A.Adjusting the local preference attribute on incoming EBGP updates.
B.AS path prepending outbound to external peers.
C.Utilizing provider-supported BGP communities to influence upstream routing policies.
D.Changing the local router's weight attribute for incoming EBGP routes.
E.Sending specific MED values to external peers.
AnswersB, C, E

Prepending lengthens the AS path, making the path less desirable to external peers.

Why this answer

Inbound traffic from external peers can be influenced by AS path prepending, modifying MED, or utilizing specific BGP communities accepted by transit providers.

291
Multi-Selectmedium

When configuring EVPN multi-homing in all-active mode, which THREE key components or concepts must be properly established across the PE routers? (Choose three)

Select 3 answers
A.Enabling Spanning Tree Protocol root bridge on all leaf nodes.
B.A Designated Forwarder (DF) election mechanism using Type-4 routes to determine who forwards BUM traffic.
C.A matching Ethernet Segment Identifier (ESI) configured on the attachment circuits of all participating PEs.
D.Split-horizon filtering using ESI labels to prevent BUM traffic loops back to the multi-homed site.
E.Configuring OSPF as the underlay routing protocol for EVPN signaling.
AnswersB, C, D

Type-4 routes drive DF election so only one PE forwards BUM traffic to the multi-homed segment at a given time.

Why this answer

EVPN all-active multi-homing requires a consistent Ethernet Segment Identifier (ESI) across participating PEs, an active Designated Forwarder election (governed by Type-4 routes), and split-horizon filtering to prevent traffic loops.

292
MCQeasy

An administrator is reviewing the BGP route selection process on a Junos device and notices that two paths have identical weights, local preferences, AS path lengths, origins, and MEDs. Which tie-breaking criterion does Junos evaluate next in the BGP route selection algorithm?

A.Preference for internal (IBGP) paths over external (EBGP) paths
B.Preference for the lowest IGP metric to the BGP next hop
C.Preference for the oldest route
D.Preference for the lowest router ID
AnswerA

Junos prefers IBGP paths over EBGP paths during the standard BGP route selection tie-breaking steps when earlier attributes are equal.

Why this answer

After comparing weight, local preference, AS path length, origin, and MED, Junos checks the routing table to prefer routes learned via internal peer (IBGP) over external peer (EBGP) before moving to router ID and IGP cost.

293
Multi-Selecthard

Which TWO conditions must be met when configuring strict priority queuing for a forwarding class in Junos? (Choose two)

Select 2 answers
A.Behavior aggregate classifiers must be disabled on all egress interfaces
B.A shaping rate should be applied to the priority queue to prevent starvation of other queues
C.The queue must be configured with priority high
D.Buffer sizes must be set to zero for all priority queues
E.The scheduler must have a transmit-rate percentage of exactly 100%
AnswersB, C

Shaping priority traffic is critical to prevent starvation.

Why this answer

Strict priority queues require a priority setting (high) and typically a shaping rate or limit to prevent starvation of other queues.

294
MCQhard

An enterprise network runs MSTP across an EX Series core. An administrator wants to ensure that a specific core port never becomes the root port for any MSTI, protecting the upstream core path. Which command achieves this?

A.set protocols mstp interface ge-0/0/0 no-root-port
B.set protocols mstp interface ge-0/0/0 root-guard
C.set protocols mstp interface ge-0/0/0 priority 0
D.set protocols mstp interface ge-0/0/0 restrict-role root
AnswerA

The 'no-root-port' statement ensures the interface is never selected as a root port.

Why this answer

Root protection in MSTP is enabled via the 'no-root-port' or 'root-protection' statement under interface configuration in MSTP. In Junos, 'no-root-port' is used.

295
MCQhard

An enterprise network uses IP phones that require LLDP-MED to receive voice VLAN information. However, security policy dictates that LLDP should be disabled on all user-facing access ports that do not have IP phones. Which configuration statement disables LLDP on a per-interface basis?

A.set interfaces ge-0/0/25 lldp-state off
B.set ethernet-switching-options lldp interface ge-0/0/25 restrict
C.set protocols lldp interface ge-0/0/25 action block
D.set protocols lldp interface ge-0/0/25 disable
AnswerD

Adding the disable option under protocols lldp interface stops LLDP transmission and reception on that specific port.

Why this answer

Disabling LLDP on specific interfaces while keeping it enabled globally is achieved via the disable statement under protocols lldp interface.

296
MCQmedium

You are redistributing static routes into OSPF on a Junos device and want to assign a specific metric type to the resulting External LSAs. Where is this metric-type defined?

A.set policy-options policy-statement REDIST-STATIC term 1 from external-type 1
B.set protocols ospf export REDIST-STATIC metric-type 1
C.set policy-options policy-statement REDIST-STATIC term 1 then metric-type type-1
D.set protocols ospf redistribute static metric-type 1
AnswerC

The 'metric-type' action within a routing policy 'then' clause sets the OSPF external metric type.

Why this answer

External route metric types (Type 1 or Type 2) when redistributing into OSPF are defined under the export policy term's then clause using 'metric-type'.

297
MCQeasy

Which BGP address family must be enabled under the BGP neighbor configuration to exchange EVPN routes between PE routers?

A.inet-unicast
B.evpn signaling (or l2vpn evpn)
C.vpls-signaling
D.iso-unicast
AnswerB

The EVPN address family is required to exchange all EVPN route types (1 through 5).

Why this answer

To exchange EVPN routing information, the 'evpn signaling' or 'l2vpn evpn' address family must be configured under the BGP protocol hierarchy and neighbor sessions.

298
MCQhard

An enterprise has deployed MSDP between two independent PIM sparse-mode domains. An administrator notices that Source-Active (SA) messages are looping between MSDP peers. Which Junos mechanism should be configured to prevent SA message loops in an MSDP topology?

A.Configure static RPF routes pointing to the peer loopbacks.
B.Configure an MSDP mesh group using 'set protocols msdp mesh-group <name>'.
C.Enable PIM Dense-Mode on the interconnecting links between the MSDP peers.
D.Apply a TTL scoping boundary on the MSDP TCP sessions.
AnswerB

Mesh groups allow a set of MSDP peers to fully mesh logically; SA messages received from a mesh group peer are not flooded to other members of the same mesh group, preventing loops.

Why this answer

MSDP uses a modified Reverse Path Forwarding (RPF) check for SA messages. To prevent loops in complex topologies, peer RPF flooding rules or MSDP mesh groups are configured using 'set protocols msdp mesh-group'.

299
MCQhard

An engineer is troubleshooting a large-scale enterprise network with multiple MSTP regions connected by a legacy RSTP region. How do boundary switches running MSTP interact with RSTP switches on shared segments?

A.MSTP boundary ports drop all RSTP BPDUs and treat the link as a point-to-point blocked topology.
B.The entire MSTP region converts its configuration digest to match the RSTP region's default region name.
C.MSTP boundary ports detect RSTP BPDUs and operate in RSTP compatibility mode on that specific port.
D.MSTP isolates the RSTP region into a separate MSTI instance automatically.
AnswerC

MSTP bridges automatically migrate ports connecting to RSTP/STP regions to legacy mode for compatibility.

Why this answer

MSTP bridge ports connected to RSTP regions automatically downgrade their communication mode to interoperate with RSTP/STP BPDUs.

300
MCQhard

An IP phone connected to an EX4600 switch fails to power up. You run show poe interface ge-0/0/1 and find the status displays 'Hardware error'. What is the most appropriate troubleshooting step?

A.Check the switch's power supply units (PSUs) and internal PoE controller status using show chassis power.
B.Reconfigure the port from access mode to trunk mode.
C.Modify the LLDP-MED network policy timeout value to allow longer initialization.
D.Disable spanning tree protocol on the interface.
AnswerA

Hardware errors point to physical power supply failures or internal PoE controller faults.

Why this answer

A 'Hardware error' status on a PoE port indicates a physical power supply fault, internal PoE controller issue, or physical short circuit on the cable/port.

Page 3

Page 4 of 5

Page 5

All pages